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Remarks 

Reconsideration of this Application is respectfully requested. 

Upon entry of the foregoing amendment, claims 1-9 and 12-19 are pending in 
the application, with claims 1 and 12 being the independent claims. Claims 1 and 12 
are sought to be amended. These changes are believed to introduce no new matter, 
and their entry is respectfully requested. 

Based on the above amendment and the following remarks, Applicants 
respectfully request that the Examiner reconsider all outstanding objections and 
rejections and that they be withdrawn. 

Rejections under 35 U.S.C. § 102 

Claims 1-9 and 12-19 were rejected under 35 U.S.C. §102(e) as being 
anticipated by Ziai, U.S. Patent No. 7,017,042 (Ziai). Applicants respectfully traverse 
this rejection. 

Ziai does not teach or suggest each and every limitation of Applicants' 
amended independent claims 1 and 12. Ziai describes a network protocol offload chip 
400 having an IPSec decryption accelerator 402 and the IPSec encryption accelerator 
411. (Ziai, FIG. 4). As IP packets are received by the network protocol offload chip's 
400 inbound network interface 401, network interface logic 450 forwards the received 
packets to the IPSec decryption accelerator 402. (Ziai, col. 7, lines 25-30). "While 
the packets are waiting to be analyzed by the IPSec decryption accelerator 402, they 
will be placed in the inbound packet buffer 403." (Ziai, col. 7, lines 30-34). 
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Further, in Ziai, system interface 407 receives application data sent by system 
CPU 408. (Ziai, col. 9, lines 1-3). After TCP/IP processing, IP packets enter buffer 
418. Next, IPSec encryption accelerator 41 1 performs IPSec processing on the IP 
Packets from buffer 418 requiring IPSec processing. (Ziai, col. 9, lines 18-45). As 
described in Ziai, IPSec encryption accelerator 411 has an input buffer 418 and IPSec 
decryption accelerator 403 has a separate input buffer 403. IPSec encryption 
accelerator 411 does not share an input buffer with IPSec decryption accelerator 403. 

Accordingly, Ziai does not teach or suggest "a shared input buffer associated 
with a plurality of input ports and the plurality of cryptographic processing cores, the 
shared input buffer configured to hold payload information associated with the data 
received by the plurality of input ports," as recited in amended independent claim 1 or 
"an input buffer shared among the plurality of input ports and the plurality of 
cryptographic processing cores," as recited in amended independent claim 12. 

Furthermore, Ziai does not teach or suggest "a security association lookup unit 
configured to identify a security association address in a first portion of the address 
space associated with the cryptography accelerator by using header information, the 
first portion of the address space corresponding to bus controller memory, 1 ' as recited 
in amended independent claim 1 or "a policy security association lookup unit 
configured to issue a read request to a bus controller memory for security association 
information for a first data packet and to process a second data packet prior to receipt 
of the read response for the first data packet, wherein the bus controller memory is 
separate from a system memory," as recited in amended independent claim 12. 
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The Office Action alleges that "the IPSEC security association data base ... is 

associated with the DMA controller. DMA controller takes control of the bus and 

memory for data transfer between devices." (Office Action, p. 5). Applicants 

disagree with this understanding. Ziai describes that Direct Memory Access (DMA) 

is used to send the IP packet to Network Offload Memory (NOM) 405, for example, 

only after IPSec processing. (Ziai, col. 8, lines 36-38). 

After IPSec processing 303b at the acceleration device 302, the IP 
packet is sent (e.g., via a Direct Memory Access (DMA)) 304b to the 
Network Offload Memory (NOM) 304. Information is transferred 
directly to and from memory by many devices over DMA channels. 
A DMA channel is a system pathway. DMA is a method to transfer 
large quantities of data, or to make high-speed transfers of data in 
which individual transfer cycles are not the responsibility of the 
system CPU. A separate DMA controller unit 404 may be used to 
manage each data transfer. 

(Ziai, col. 4, lines 36-45). Nowhere does Ziai teach or suggest that DMA is used by 

the IPSec Encryption or Decryption Accelerators to access the security association 

database (SAD) or the security policy database (SPD). Instead, in Ziai, the SPD 308 

and SAD 309 "may be contained in one database or two databases. Furthermore, in 

alternate embodiments, the SPD 308 and SAD 309 may be contained within a 

memory chip or within multiple memory chips. In still further embodiments, the SPD 

308 and SAD 309 may be maintained within a register or within multiple registers." 

(Ziai, col. 6, lines 26-32). 

Thus, Ziai does not teach or suggest "a security association lookup unit 

configured to identify a security association address in a first portion of the address 

space associated with the cryptography accelerator by using header information, the 

first portion of the address space corresponding to bus controller memory," as recited 
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in amended independent claim 1 or "a policy security association lookup unit 

configured to issue a read request to a bus controller memory for security association 

information for a first data packet and to process a second data packet prior to receipt 

of the read response for the first data packet, wherein the bus controller memory is 

separate from a system memory," as recited in amended independent claim 12. 

For at least the foregoing reasons, independent claims 1 and 12 are patentable 

over Ziai. Claims 2-9 depend from claim 1 and claims 12-19 depend from claim 12. 

For at least these reasons, and further in view of their own features, claims 2-9 and 

13-19 are also patentable over Ziai. Reconsideration and withdrawal of the rejection 

are therefore respectfully requested. 

Conclusion 

All of the stated grounds of objection and rejection have been properly 
traversed, accommodated, or rendered moot. Applicants therefore respectfully 
request that the Examiner reconsider all presently outstanding objections and 
rejections and that they be withdrawn. Applicants believe that a full and complete 
reply has been made to the outstanding Office Action and, as such, the present 
application is in condition for allowance. If the Examiner believes, for any reason, 
that personal communication will expedite prosecution of this application, the 
Examiner is invited to telephone the undersigned at the number provided. 
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Prompt and favorable consideration of this Amendment and Reply is 
respectfully requested. 

Respectfully submitted, 

Sterne, Kessler, Goldstein & Fox p.l.l.c. 

Ebn A. Gordon 
Attorney for Applicants 
Registration No. 50,633 

Date: Se^p Uiwbe-v ^ L ^xx >^ 

1 100 New York Avenue, N.W. 
Washington, D.C. 20005-3934 
(202) 371-2600 
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